[Update 2017 May 05 ]
One succinct text on what constitutes good VPN architecture might be found here.
Windows is one ancient OS. And you are the Admin (with capital A) on this legacy server farm. There is much (much) more of these, than people are led to believe. And you have the problem, perhaps other admins are dumping onto you: All of a sudden on this legacy machine MMC does not work. Gasp!
And, contrary to popular belief you know on your farm there are many servers running all possible version of Windows. Why and how? Well, let’s not go in there right now. Continue reading